Staff AppSec Engineer: Threat Research & Cloud Defense

Partners in Digital Health; Pierre (SD); On-site; USD 107,000 - 284,000; Full time

Benefits offered by this job

Health benefits

Bonus eligibility

Equity awards

Comprehensive benefits package

Job summary

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure healthcare tech across cloud and on-prem environments. You’ll partner with engineering teams to embed security in the SDLC, perform threat modeling, and lead vulnerability analyses to strengthen defenses.

You will mentor engineers, contribute to security automation, and influence secure design decisions across multiple teams, with a focus on scalable, resilient security solutions.

Qualifications

• 7+ years of experience in application security, information security, software engineering, or related roles.
• 5+ years with one or more programming or scripting languages (Java, Python, JavaScript, C#, C/C++, PowerShell, or Shell).
• 3+ years securing public cloud environments (AWS, Azure, or GCP).
• 3+ years with container technologies (Docker, Kubernetes).
• 3+ years with Infrastructure as Code or Security as Code practices.
• 3+ years performing application security assessments, vulnerability analysis, and threat modeling.

Responsibilities

• Security Engineering & Secure Development: Implement and support security standards and best practices; integrate security into design, development, testing, and deployment; promote secure coding; advance security automation.
• Threat Research & Analysis: Research emerging threats and trends; conduct assessments, threat modeling, and vulnerability analysis; provide actionable recommendations.
• Security Solutions & Architecture: Design and manage security technologies across cloud and enterprise; support remediation and scalable architectures.
• Collaboration & Communication: Work with engineers and security stakeholders; participate in design reviews; communicate findings clearly.
• Incident Response & Operational Support: Participate in investigations and response; support security operations; identify root causes and remediation.
• Mentorship & Knowledge Sharing: Mentor engineers; deliver training and documentation; foster security awareness and learning.
• Innovation & Continuous Improvement: Evaluate new tools; contribute to research and PoCs; propose process improvements.

Skills

Application security

Threat research

Secure development

Threat modeling

Cloud security

Security automation

Education

Bachelor's degree

Tools

Docker

Kubernetes

AWS

Azure

GCP

Terraform

Job description

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure healthcare tech across cloud and on-prem environments. You’ll partner with engineering teams to embed security in the SDLC, perform threat modeling, and lead vulnerability analyses to strengthen defenses.

You will mentor engineers, contribute to security automation, and influence secure design decisions across multiple teams, with a focus on scalable, resilient security solutions.